From a4ffe474c4e7a151601a2685404fe5d8e46dc124 Mon Sep 17 00:00:00 2001
From: AdamKorcz <44787359+AdamKorcz@users.noreply.github.com>
Date: Wed, 5 Jan 2022 05:01:57 +0000
Subject: [PATCH] [distribution] Initial integration (#6014)

---
 projects/distribution/Dockerfile   | 21 +++++++++++++++++++++
 projects/distribution/build.sh     | 19 +++++++++++++++++++
 projects/distribution/project.yaml | 24 ++++++++++++++++++++++++
 3 files changed, 64 insertions(+)
 create mode 100644 projects/distribution/Dockerfile
 create mode 100644 projects/distribution/build.sh
 create mode 100644 projects/distribution/project.yaml

diff --git a/projects/distribution/Dockerfile b/projects/distribution/Dockerfile
new file mode 100644
index 000000000..1c9170301
--- /dev/null
+++ b/projects/distribution/Dockerfile
@@ -0,0 +1,21 @@
+# Copyright 2021 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+################################################################################
+
+FROM gcr.io/oss-fuzz-base/base-builder-go
+RUN git clone --depth 1 https://github.com/distribution/distribution
+RUN git clone --depth 1 https://github.com/cncf/cncf-fuzzing
+COPY build.sh $SRC/
+WORKDIR $SRC/distribution
diff --git a/projects/distribution/build.sh b/projects/distribution/build.sh
new file mode 100644
index 000000000..1b4fd62f4
--- /dev/null
+++ b/projects/distribution/build.sh
@@ -0,0 +1,19 @@
+#!/bin/bash -eu
+# Copyright 2021 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+################################################################################
+
+$SRC/cncf-fuzzing/projects/distribution/build.sh
+
diff --git a/projects/distribution/project.yaml b/projects/distribution/project.yaml
new file mode 100644
index 000000000..294381c6b
--- /dev/null
+++ b/projects/distribution/project.yaml
@@ -0,0 +1,24 @@
+homepage: "https://github.com/distribution/distribution"
+main_repo: "https://github.com/distribution/distribution"
+primary_contact: "cncf-distribution-security@lists.cncf.io"
+auto_ccs :
+  - "adam@adalogics.com"
+  - "david@adalogics.com"
+  - "chrispat@github.com"
+  - "clarkbw@github.com"
+  - "csnider@mirantis.com"
+  - "hswimelar@gitlab.com"
+  - "hweiwei@vmware.com"
+  - "jpereira@gitlab.com"
+  - "justin.cormack@docker.com"
+  - "ksquizzato@mirantis.com"
+  - "milos.gajdos@docker.com"
+  - "sargun@sargun.me"
+  - "wwarren@digitalocean.com"
+  - "wangyan@vmware.com"
+  - "steve.lasker@microsoft.com"
+language: go
+fuzzing_engines:
+  - libfuzzer
+sanitizers:
+  - address